1

Windows Server 2012 R2 Standard resets SMB Negotiate Protocol Request packet, which should be the first step for NTLM negotiation. Server IP is 10.49.0.3. Client IP is 10.49.0.194. The client is a proxy that is trying to complete NTLM relay. What could I check or try to change on the Windows Server? I would expect the server to reply with Negotiate Protocol Response. I have IIS running on the same server, for which NTLM authentication is enabled and working fine.

pcapscreenshot1

pcapscreenshot2

avocado123
  • 11
  • 2

0 Answers0